AD - Active Directory Contact Object Creation for Manager

iamksatish · May 27, 2024, 9:31am

Use below

              accountRequest.add(new AttributeRequest("objectType",ProvisioningPlan.Operation.Set, "contact"));
              accountRequest.add(new AttributeRequest("cn", ,ProvisioningPlan.Operation.Set,managerFN + " " + managerLN));
              accountRequest.add(new AttributeRequest("sn",,ProvisioningPlan.Operation.Set, managerLN));
              accountRequest.add(new AttributeRequest("givenName",,ProvisioningPlan.Operation.Set, managerFN));
              accountRequest.add(new AttributeRequest("mail",,ProvisioningPlan.Operation.Set, managerEmail));

gopalmca1 · May 27, 2024, 12:03pm

same error

baoussounda · May 28, 2024, 10:39pm

Hi @gopalmca1,

Base on this logs below it’s look like set email to time, in your provisioning plan, please review that.

<entry key="Request">
        <value>
          <AccountRequest application="Mexichem-Application-ActiveDirectory" nativeIdentity="cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com" op="Create">
            <AttributeRequest name="sn" op="Set" value="Testtt7"/>
            <AttributeRequest name="givenName" op="Set" value="Emal7"/>
            <AttributeRequest name="mail" op="Set">
              <Value>
                <List>
                  <String>email7.Testtt7@orbia.com</String>
                  <String>emal7.testtt7@orbia.com</String>
                </List>
              </Value>
            </AttributeRequest>
            <AttributeRequest name="objectType" op="Set">
              <Value>
                <List>
                  <String>contact</String>
                  <String>User</String>
                </List>
              </Value>
            </AttributeRequest>
            <AttributeRequest name="userPrincipalName" op="Set" value="emal7.testtt7@orbia.com"/>
            <AttributeRequest name="sAMAccountName" op="Set" value="et024586"/>
            <AttributeRequest name="displayName" op="Set" value="Emal7 Testtt7 | Orbia (Wavin)"/>
            <AttributeRequest name="IIQDisabled" op="Set">
              <Value>
                <Boolean></Boolean>
              </Value>
            </AttributeRequest>
            <AttributeRequest name="password" op="Set" value="**********"/>
            <AttributeRequest name="pwdLastSet" op="Set">
              <Value>
                <Boolean>true</Boolean>
              </Value>
            </AttributeRequest>
            <AttributeRequest name="department" op="Set" value="DE Hardware and IT Infrastructure"/>
            <AttributeRequest name="co" op="Set" value="India"/>
            <AttributeRequest name="c" op="Set" value="IN"/>
            <AttributeRequest name="division" op="Set" value="DV Wavin"/>
            <AttributeRequest name="employeeType" op="Set" value="employee"/>
            <AttributeRequest name="physicalDeliveryOfficeName" op="Set" value="Bangalore"/>
            <AttributeRequest name="company" op="Set" value="Wavin B.V."/>
            <AttributeRequest name="employeeNumber" op="Set" value="111119"/>
            <AttributeRequest name="mpeopleID" op="Set" value="email7.Testtt7"/>
            <AttributeRequest name="msNPAllowDialin" op="Set" value="Not Set"/>
          </AccountRequest>
        </value>
      </entry>
    </Map>
  </Arguments>
</RpcRequest>
"
05/27/2024 02:54:40 : RpcHandler [ Thread-7 ] DEBUG : "Initiating the serviceState for 63c1c747-07f7-46b3-9af7-c2538ae24144"
05/27/2024 02:54:40 : RpcHandler [ Thread-7 ] INFO : "Calling Service [ADConnector] and method[provision] "
05/27/2024 02:54:40 : AbstractConnector [ Thread-7 ] DEBUG : "ENTER AbstractConnector"
05/27/2024 02:54:40 : AbstractConnector [ Thread-7 ] DEBUG : "EXIT AbstractConnector"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER prepare"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT prepare"
05/27/2024 02:54:40 : AbstractConnector [ Thread-7 ] DEBUG : "ENTER Provision"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER doProvision"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] INFO : "Operation requested is: Create"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER preProcessExchangeRequests"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER isExchangeEnabled"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT isExchangeEnabled"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] INFO : "Exchange environment is not configured for the forest setting for - cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "There are no requests to update the exchange configuration for - cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT preProcessExchangeRequests"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER CreateADObject"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER Create"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] INFO : "Start Adding identity : cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER bind"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ENTER buildURLFromIdentity"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] INFO : "Server [MXTLAW0702.mexqas.com] DN [OU=Contacts,DC=mexqas,DC=com]"
05/27/2024 02:54:40 : Util [ Thread-7 ] DEBUG : "FQDN for MXTLAW0702.mexqas.com: MXTLAW0702.mexqas.com"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "Derived URL[LDAP://MXTLAW0702.mexqas.com/OU=Contacts,DC=mexqas,DC=com] original [OU=Contacts,DC=mexqas,DC=com]"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT buildURLFromIdentity"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] INFO : "Bind with User new DirectoryEntry(LDAP://MXTLAW0702.mexqas.com/OU=Contacts,DC=mexqas,DC=com, User=sailpointconnector@mexqas.com authType=ServerBind)"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT bind"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] ERROR : "Exception caught in Create for identity: cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com - System.InvalidCastException: Unable to cast object of type 'System.Collections.ArrayList' to type 'System.String'.
   at sailpoint.services.ADConnectorServices.Create(Boolean processExchangeAttributeUpdate)"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT Create"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "ADObject creation complete"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT CreateADObject"
05/27/2024 02:54:40 : ADConnectorServices [ Thread-7 ] DEBUG : "EXIT doProvision"
05/27/2024 02:54:40 : AbstractConnector [ Thread-7 ] DEBUG : "EXIT Provision"
05/27/2024 02:54:40 : RpcHandler [ Thread-7 ] INFO : "OutgoingResponse:
<?xml version="1.0" encoding="utf-8"?>
<RpcResponse version="1.0" requestId="63c1c747-07f7-46b3-9af7-c2538ae24144" complete="true">
  <RpcErrors>
    <List>
      <String>Unable to cast object of type 'System.Collections.ArrayList' to type 'System.String'.. HRESULT:[0x80004002]</String>
    </List>
  </RpcErrors>
  <ResultAttributes>
    <Map>
      <entry key="requestProcessedOn" value="27/05/2024 02:54:40 a. m." />
      <entry key="returnRequest">
        <value>
          <AccountRequest application="Mexichem-Application-ActiveDirectory" op="Create" nativeIdentity="cn=Emal7 Testtt7,OU=Contacts,DC=mexqas,DC=com">
            <AttributeRequest op="Set" name="sn" value="Testtt7" />
            <AttributeRequest op="Set" name="givenName" value="Emal7" />
            <AttributeRequest op="Set" name="mail">
              <Value>
                <List>
                  <String>email7.Testtt7@orbia.com</String>
                  <String>emal7.testtt7@orbia.com</String>
                </List>
              </Value>
            </AttributeRequest>
            <AttributeRequest op="Set" name="objectType">
              <Value>
                <List>
                  <String>contact</String>
                  <String>User</String>
                </List>
              </Value>
            </AttributeRequest>
            <AttributeRequest op="Set" name="userPrincipalName" value="emal7.testtt7@orbia.com" />
            <AttributeRequest op="Set" name="sAMAccountName" value="et024586" />
            <AttributeRequest op="Set" name="displayName" value="Emal7 Testtt7 | Orbia (Wavin)" />
            <AttributeRequest op="Set" name="IIQDisabled">
              <Value>
                <Boolean>false</Boolean>
              </Value>
            </AttributeRequest>
            <AttributeRequest op="Set" name="password" value="**********" />
            <AttributeRequest op="Set" name="pwdLastSet">
              <Value>
                <Boolean>true</Boolean>
              </Value>
            </AttributeRequest>
            <AttributeRequest op="Set" name="department" value="DE Hardware and IT Infrastructure" />
            <AttributeRequest op="Set" name="co" value="India" />
            <AttributeRequest op="Set" name="c" value="IN" />
            <AttributeRequest op="Set" name="division" value="DV Wavin" />
            <AttributeRequest op="Set" name="employeeType" value="employee" />
            <AttributeRequest op="Set" name="physicalDeliveryOfficeName" value="Bangalore" />
            <AttributeRequest op="Set" name="company" value="Wavin B.V." />
            <AttributeRequest op="Set" name="employeeNumber" value="111119" />
            <AttributeRequest op="Set" name="mpeopleID" value="email7.Testtt7" />
            <AttributeRequest op="Set" name="msNPAllowDialin" value="Not Set" />
          </AccountRequest>
        </value>
      </entry>
    </Map>
  </ResultAttributes>
</RpcResponse>"
05/27/2024 02:54:40 : RpcHandler [ Thread-7 ] DEBUG : "ENTER Close"
05/27/2024 02:54:40 : RpcHandler [ Thread-7 ] DEBUG : "EXIT Close"

system · July 27, 2024, 10:39pm

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
IIQ API for disabling/enabling Active Directory Account IIQ Discussion and Questions	3	1144	July 19, 2023
AD Create Provisioning Policy IIQ Discussion and Questions identityiq , provisioning	17	1020	April 16, 2024
SAP Success Factor attributes do not sync to Active Directory via SailPoint IIQ IIQ Discussion and Questions aggregation , identityiq , provisioning , access-profiles , attributes , connectors	25	993	December 31, 2023
IIQ - O365 mail forwarding rules via Azure AD connector IdentityIQ (IIQ)	0	882	January 4, 2022
Even after successful provisioning Create Account Operations are triggered ISC Discussion and Questions	12	5610	July 19, 2023

AD - Active Directory Contact Object Creation for Manager

Related topics